We currently support security updates for the following versions:

We take security seriously. If you discover a security vulnerability, please report it responsibly.

1. Do NOT create a public GitHub issue for security vulnerabilities
2. Email security concerns to: [email protected]
3. Include detailed information about the vulnerability
4. Provide steps to reproduce the issue if possible

• Description of the vulnerability
• Steps to reproduce the issue
• Potential impact assessment
• Suggested fixes (if any)
• Your contact information

• Acknowledgment: Within 48 hours
• Initial Assessment: Within 1 week
• Status Updates: Weekly until resolved
• Resolution: Depends on severity and complexity

When using Nebula in production:

1. Keep Updated: Use the latest stable version
2. Secure Configuration: Follow configuration guidelines
3. Network Security: Implement proper firewall rules
4. Access Control: Use appropriate authentication
5. Monitoring: Monitor for unusual activity
6. Data Protection: Encrypt sensitive data in transit and at rest

This security policy covers:

• Core Nebula application
• Official connectors
• Configuration and deployment guides
• Dependencies with known vulnerabilities

• Third-party connectors
• Custom configurations
• Infrastructure security
• Social engineering attacks

Thank you for helping keep Nebula secure!